: Wordpress site constantly bruted forced even though there is no wp-login.php page After being attacked many times and compromised I installed Sucuri for monitoring. Seeing how many times a day

After being attacked many times and compromised I installed Sucuri for monitoring.
Seeing how many times a day I was being brute forced, I decided to turn off the wp login page, but I still get notifications of a failed login.

How is this possible if there's no login page to speak of on my site? How can bots access that page or try to login if it is not present?

10.01% popularity Vote Up Vote Down

: Share Secure Url Between Multiple Sites I have a customer who has a bunch of websites, such as islandwidgets.com, mainewidgets.com, etc..., but he would like to have them all use secure.widgets.com

@Kristi941

Posted in: #AspNet

1 Comments

: What is CPU minutes (Web Hosting)? When I ask a support from a web hosting company I receive this part. You can use up to 300+ CPU minutes without causing any issues What is the meaning

@Kristi941

Posted in: #Cpu #WebHosting

1 Comments

: Is Alexa Rank a true representation of growth? I handle the SEO of the company's website. Last month we peaked at a national Alexa Rank of around 30,000, but in the past 3 weeks it has

@Kristi941

Posted in: #Alexa #Pagerank #Ranking #Seo

4 Comments

: Hosting one webpage with a different host? I have a small website and have a free (shared) web hosting package but I have recently created a node.js app and I want to purchase a cheap vps

@Kristi941

Posted in: #WebHosting

2 Comments

Login to post a comment!

1 Comments

Sorted by latest first Latest Oldest Best

@BetL925

Bots are endlessly looking for ways to get into your Wordpress site and there are many more than just the standard 'wp-login.php' address.

There is also the /wp-admin/ in addition to wp-login.php, as well as comment sections, and other user profile pages that all may or may not be serving one way or another to approach the user login.

The bots could also potentially have discovered your new login address, especially if you used something in the phrasing such as "admin" "login" "logon" etc.

I would suggest blocking IP addresses after a certain number of failed attempts to login. It will not stop all the bots, but at least you are pro-actively defending your site from brute force attacks.

10% popularity Vote Up Vote Down

Feed

: Wordpress site constantly bruted forced even though there is no wp-login.php page After being attacked many times and compromised I installed Sucuri for monitoring. Seeing how many times a day

More posts by @Kristi941

: Share Secure Url Between Multiple Sites I have a customer who has a bunch of websites, such as islandwidgets.com, mainewidgets.com, etc..., but he would like to have them all use secure.widgets.com

: What is CPU minutes (Web Hosting)? When I ask a support from a web hosting company I receive this part. You can use up to 300+ CPU minutes without causing any issues What is the meaning

: Is Alexa Rank a true representation of growth? I handle the SEO of the company's website. Last month we peaked at a national Alexa Rank of around 30,000, but in the past 3 weeks it has

: Hosting one webpage with a different host? I have a small website and have a free (shared) web hosting package but I have recently created a node.js app and I want to purchase a cheap vps

Login to post a comment!

1 Comments

Back to top | Use Dark Theme